8725 matches found
CVE-2024-33055
CVE-2024-33055 describes memory corruption occurring when invoking IOCTL calls to unmap DMA buffers in Qualcomm chipsets. Connected sources confirm the issue affects memory handling in the DMA buffer unmapping path and classify the impact at the memory-corruption level; several advisories referen...
CVE-2024-33055 Use After Free in Computer Vision
Memory corruption while invoking IOCTL calls to unmap the DMA buffers...
CVE-2024-33041 Use of Out-of-range Pointer Offset in Computer Vision
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,...
CVE-2024-33041
CVE-2024-33041 concerns memory corruption in Qualcomm chipsets caused by missing input parameter validation for the fence frame IOCTL calls (specifically the number of fences). The root cause is a validation gap in the fence framework IOCTL path, leading to potential memory corruption with high i...
CVE-2024-33041 Use of Out-of-range Pointer Offset in Computer Vision
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,...
PT-2025-2408 · Qualcomm · Snapdragon +36
Name of the Vulnerable Software and Affected Versions: No specific software or affected versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when invoking IOCTL calls to unmap DMA buffers. This can lead to memory corruption. No...
PT-2025-2703
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue involves memory corruption while processing an IOCTL call invoked from user-space to verify non-extension FIPS encryption and decryption...
PT-2025-2410
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Information disclosure occurs while processing an IOCTL call made for releasing a trusted VM process or opening a channel without initializing the...
CVE-2024-55408
An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied...
CVE-2024-55407
The ITE IO Access v1.0.0.0 software by ITE Tech. Inc contains a vulnerability in the DeviceloControl function. An attacker can perform arbitrary port read and write actions by supplying crafted IOCTL requests , potentially leading to unauthorized data modification or access. As a temporary workar...
PT-2025-2701
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Compute affected versions not specified Description The issue is related to memory corruption that occurs when an IOCTL call is invoked from user-space to write board data to the WLAN driver. This can lead to potential...
PT-2025-2700
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Compute affected versions not specified Description The issue is related to memory corruption that occurs when an IOCTL call is invoked from user-space to read board data. This can lead to unauthorized access and potentiall...
CVE-2024-45550: Improper Validation of Array Index
Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls...
CVE-2024-45548: Buffer Over-read
Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call...
CVE-2024-45547: Buffer Copy without Checking Size of Input
Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality...
CVE-2024-45546: Buffer Over-read
Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space...
CVE-2024-45542: Stack-based Buffer Overflow
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...
CVE-2024-45541: Buffer Copy without Checking Size of Input
Memory corruption when IOCTL call is invoked from user-space to read board data...
CVE-2024-33061: Buffer Over-read
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...